User added private repos are visible to all

Created by: ryanslade

When adding a user added private repo, other users are able to access it.

This is most likely because we do not enforce that user added repos have the authorization setting.